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Abstract 

We present a tripartite three-level state that allows a secret sharing protocol among the three 
parties, or a quantum key distribution protocol between any two parties. The state used in this 
scheme contains entanglement even after one system is traced out. We show how to utilize this 
residual entanglement for quantum key distribution purposes, and propose a realization of the 
scheme using entanglement of orbital angular momentum states of photons. 



* Electronic address: |nihira@optics.rochester.ei 



1 



I. INTRODUCTION 



Here we present a simple three-level tripartite quantum protocol that can be generalized 
to a N-level N-partite scheme. The initial state that the three parties share can be used 
for both quantum secret sharing protocol or a BB84-like protocol between any two parties. 
Although BB84 is a protocol in which Alice and Bob perform a measurement on the same 
particle, making separate measurements on two entangled particles shared between Alice and 
Bob can also produce perfectly correlated measurement outcomes. In this manner a BB84- 
like scheme can be employed for entangled states. The interesting aspect of the proposed 
state is that, unlike the \GHZ)n- state, the reduced density matrix of any two particles still 
contains some entanglement, and perfectly correlated measurements can be made in the 
reduced space thus making the protocol robust against particle loss. We also show how this 
scheme can be realized using entangled orbital angular momentum states of light. 

The original cryptographic protocol introduced by Bennett and Brassard jll generated 
a secure key using two sets of bases that were mutually unbiased. Later, Ekert suggested 
the use of entangled states to generate a common key in a secure fashion However, 
these quantum key distribution (QKD) protocols involved only two parties and two-level 
systems. In recent years researchers have drawn their attention to QKD protocols that 
■nvolve multi-jeve. systems wth two parties SflBBQQ. or mulfp.e parties with two- 
level systems j9|, 110|| . Motivating the pursuit of multi- level quantum key distribution is that 
more information can be carried by each particle thereby increasing the information flux, and 
some multi-level protocols have been shown to have greater security against eavesdropping 
attacks 0, 0]. As for multi-party protocols there is the quantum secret sharing protocol 
which employs \GHZ)n states j9l|l0|, but there seems to be little else besides this. 

On the experimental aspect, one of the obstacles for multi- level schemes is the feasibility 
of such schemes. Atoms have multiple energy levels that can be utilized, but preparing 
atoms in some prescribed state and sending them off to separate parties is not realistic. The 
decoherence time of the state will determine how far the particles can travel before they 
become useless for any scheme that requires a particular state. However, recent experimen- 
tal demonstrations in the entanglement of orbital angular momentum states of photons and 
the generation of arbitrary entangled states with these orbital angular momentum quantum 
numbers makes photons a promising resource for multidimensional quantum pro- 
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tocols. Furthermore, much work has been done in detecting these orbital angular momentum 
states of light and its superpositions at the single photon level |l4, 15, IG^ . 

Here we investigate another possible multi-party protocol involving a state which, unlike 
the \GHZ)n state, contains some entanglement even after one of the particles is traced out. 
Although the remaining state is a mixed state, perfectly correlated measurements can be 
made by making measurements in a reduced space. This makes the state rather interesting 
because it allows any two parties to create a key without any help from the third. 



II. QUANTUM SECRET SHARING PROTOCOL 



Suppose there is a task at hand where the involvement of more than one party is needed 
for the sake of checks and balances. This could be for launching missiles, opening bank safes, 
or other sensitive matters where no one individual can be trusted to execute. To this end, 
one sends only parts of the launch code, bank vault combination, etc., to each party involved 
in the task. The message can be deciphered only when all the parties involved cooperate. 
In recent years quantum mechanical version of these secret sharing protocols have been 
discussed using GHZ states jslIlOl. Here we propose another secret sharing scheme using a 
three-level system. 

We assume that the three parties (Alice, Bob, and Charlie) share the state 



ah) + |6a)) |c) + [\ac) + |ca)) \b) + [\ch) + |6c) j \a) 



(1) 



where |a), and |c) are the three quantum levels and {\,ah) + |6a)j|c) is short hand for 

^|«)Aiice ® \b)'Boh + |&) Alice ® |«)Bobj ® |c)chariie- Notc that this statc is the sum of all the 
permutations of the three levels, and that the state collapses into a Bell state when one 
of the parties makes a measurement in the representational basis hence the measurement 
outcomes are perfectly correlated. Now we define another set of measurement basis vectors 



\ul) = ^[\a) + \h) + \c) 



(2) 



\u2) 



\a) + e'^\h) + e-''t'\c) 



(3) 
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\u3) ^ ^[\a) + e-"t'\b) + e^'^lc)], (4) 

where (p — This set of measurement basis vectors is a mutually unbiased basis set for 
a three level system. The original state is perfectly correlated in this measurement basis as 
well since 



{ul,ul\^) = \ul), {u2,ul\^) = -\u2), {u3,ul\^) = -|m3), (5) 
(1^1,-^21*) = -e-''l'\u3), (1*2,-^21*) = -e'^'^'lul), {u3,u2\^f) = e-''f'\u2), (6) 

{ul,u3\-^) = -e''^\u2), {u2,u3\-^) = e''^\u3), {u3,u3\-^) = -e-''^\ul) (7) 

where (m1,m1|\E') = \ul) is shorthand for Bob(Ml| ^aucc (mII^) = |'ul)chariie- First, Alice 
measures her particle using one of the bases, then Bob makes his measurement in one of the 
bases and then Charlie does the same. If all the parties involved measure in the same basis, 
then they will keep the outcome of their measurement. At the very end. Bob and Charlie get 
together and compare notes to determine Alice's measurement outcomes. Clearly, from the 
structure of the initial state, neither Bob nor Charhe could tell what Alice's measurement 
was without getting together and sharing measurement results. 

III. QUANTUM KEY DISTRIBUTION PROTOCOL 

Alice, Bob, and Charlie still share the same initial state described before, but what 
happens if Charlie loses his particle? Can Alice and Bob still utilize the entanglement 
they have between their particles to communicate? There is indeed a simple way to take 
advantage of the residual entanglement Ahce and Bob share. The reduced density matrix 
of the original state when Charhe's system is traced out is 
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3 Ll^a6)(*a6| + |*6c)(*6c| + | ^'ca) (^'cal J (8) 

where — + \ji)] and i,j e (a, 6, c). Alice and Bob share this mixed state, 

but the question remains whether they can get perfectly correlated measurement outcomes 
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from this state. Indeed, this can be done if Ahce and Bob restrict their measurements to a 
two-dimensional subspace of the three-level system. 

Let us supposed Alice and Bob decide to make measurements in the (|a), \b)) subspace, 
so they measure in either the ||a), basis or + "^(^k) ~ | basis. If the 

state they shared was I'^ab), then they would get perfectly correlated measurement outcomes 
provided they measured in the same basis. In the case in which the state they shared was 
l^^bc) either Alice or Bob will get a click in his or her detector if they measure in the {|a), \b)} 
basis since {"^bc) has a component in \b). However, in this case it is impossible for both Alice 
and Bob to get a click in their detectors, since if one measures the state of the particle 
to be in \a), then the other party's particle will be in state |c), which is not within the 
two-dimensional subspace in which they are making the measurement. A similar argument 
holds for the + 1^)) ' 72 (l*^^ ~ ^^0} impossible for both Alice and Bob 

to get a click in their detectors. Hence, for QKD purposes Alice and Bob will disregard the 
measurements in which: 1) they did not measure in the same basis, and 2) when they did 
not both register a click in their detectors. The remaining measurements they made will be 
perfectly correlated. 

In fact, Alice and Bob don't even need to previously agree upon the subspace in which 
they make the measurement. They can randomly choose the subspace and add to the two 
previous criteria that they also disregard the measurements made in different subspaces. 

IV. REALIZATION USING ORBITAL ANGULAR MOMENTUM OF LIGHT 

Although the protocol is independent of any particular realization, here we present an 
implementation of the protocol using orbital angular momentum states of light. We present 
both a method to generate the initial entangled state, and the means to detect both the 
orbital angular momentum states and its superposition. 

It has been experimentally verified that the orbital angular momentum of a photon is 
conserved through spontaneous parametric down conversion, and the daughter photons are 



entangled in their orbital angular momentum Since there is no upper bound to the 

orbital angular momentum a photon can carry, it is ideal for multidimensional quantum 
protocols. 

First, we will have to generate the state the three parties are going to share. Here we will 
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use three entangled sources, a three beam coupler, three detectors, and a computer hologram 
to differentiate between the different orbital angular momentum states of the photon. The 
method used is in the same spirit as the method used to generate GHZ states from two 
entangled sources jl7|. 

The entangled source of light we are going to use is generated through spontaneous 
parametric down conversion. Using a suitable computer generated hologram to modify the 
pump beam, we can produce the following orbital angular momentum entangled state jl^ . 



3) 
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|0,0) + |1,1) + |2,2)J. (9) 

We then take three of these sources and send one of each source's output into a three-beam 
coupler. At the output of the coupler we put another computer generated hologram with 
one dislocation and we place a single mode fiber that goes into a detector at each of the 
three diffraction orders as shown in Fig. ^ The hologram imparts a A/ = for the zeroth 
diffraction order. A/ = 1 for the first diffraction order. A/ = 2 for the second diffraction 
order, and so on to the input beam. The single mode fibers only couple in the lowest 
order orbital angular momentum states hence the detector placed in the second diffraction 
order will only click if the diffracted photon was originally in the / = 2 state If all 

three detectors register a photon then it means that the photons that weren't detected have 
orbital angular momentum of / = 0,/ = 1, and / = 2, but we do not know which photon 
carries which state. Hence we are left with the state 
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tripartite/ 
1 



VE - 



|0, 2, 1) + |0, 1, 2) + |1, 0, 2) + |1, 2, 0) + |2, 0, 1) + |2, 1, 0) 



2,1) + |1,2))|0) + (|2,0) + |0,2))|1) + (|0, 1) + |1,0))|2) 



(10) 



This is the original state with which we started, Eq. ((T)), by replacing |a), \b), and |c) with 
|0),|l),and |2). 

Now that we have the state which the three parties share, the problem we are left with 
is to detect the orbital an gula r momentum states and its superposition. This could also be 
done using holograms [iXllst. but it is rather inefficient and it is not particularly suitable 
when considering single photon states. The method of choice here is a simple interferometric 
scheme employing a Mach-Zehnder interferometer with Dove prisms in its path Q]. 




FIG. 1: Generation of tripartite three- level entangled state. The three photons that do not get 
detected are in the state \^ source) provided all three detectors detect a photon 

In the first stage the Dove prisms in the two arms are rotated with respect to one another 
by an angle of a/2 = tt/2 (See Fig. 12)). This creates a relative phase shift between the 
beams in the two arms of 6 = Itt, where / is the orbital angular momentum quantum 
number. The phase shift is produced because the Dove prism flips the transverse structure 
of the field. Since the Laguerre Gaussian modes have a e*'*^ phase structure, the Dove 
prism serves as a device that imparts a /-dependent phase shift. Now, by adjusting the path 
difference appropriately one can make it so that the odd and even orbital angular momentum 
states come out of the two different output ports of the interferometer. The orbital angular 
momentum states of the incoming beam can be sorted out by cascading these devices with 
different angles between the Dove prisms Q|. The photon's state can then be collapsed into 
a particular /-state by placing detectors at each of the output ports. 

In detecting superposition states Eqs. (0111), the problem comes down to determining the 
relative phase difference between the orbital angular momentum states. Since orthogonal 
states do not interfere with one another, we have to put holograms at each output port of 
the sorting device to convert them all into the same /-state. After this is done the photons 
are sent through a three-port interferometer where the paths are appropriately adjusted so 
that the three output ports are the superposition states of interest |l8l |. 

For the case when only two of the three parties want to generate a secure key the two 
parties use only two of the three output ports. This too is easily done with the existing 
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FIG. 2: Sorting orbital angular momentum states of light. The Dove prisms in the two arms are 
rotated with respect to one another by an angle of a/2 = 7r/2. With appropriate path differences 
the even and odd orbital angular momentum states emerge from different ports of the beam splitter. 

setup. After the sorting device the two parties can measure in the orbital angular momentum 
basis, or its superposition in the two-dimensional space. Later, they will divulge both their 
measurement basis and the subspace they measured in to determine which measurements 
to keep. 

V. CONCLUSION 

Here we have shown a tripartite three-level system that can be used for both secret 
sharing protocols involving all three parties, or quantum key distribution protocol between 
any two parties. The two parties generate a secret key by taking advantage of the residual 
entanglement of the reduced density matrix. This is done by making their measurements in 
a reduced space. A physical realization of this scheme has also been shown through the use 
of entangled orbital angular momentum states of photons. 
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